WHAT IS CLAIMED IS: 

1 . A control system for a turboshaft engine comprising: 

a) means for providing a desired minimum fUel flow to the engine 
when an overspeed condition is detected and when the engine is operating in a first 
operating range; and 

b) means for shutting off fuel flow to the engine when an overspeed 
condition is detected and the engine is operating in a second operating range. 

2. A control system as recited in claim 1, wherein in the first operating 
range the engine is operating at a relatively low altitude and in the second operating 
range the engine is operating at a relatively high altitude. 

3. A control system as recited in claim 2, wherein the relatively low 
altitude includes 0 to 10,000 feet above sea level and the relatively high altitude 
exceeds 10,000 feet above sea level. 

4. A control system as recited in claim 1, wherein an overspeed condition 
is detected along two different control logic paths, a first logic path which includes 
derivative and non-derivative control logic and a second logic path which includes non- 
derivative logic. 

5. A control system as recited in claim 4, wherein the non-derivative logic 
includes proportional logic. 
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6. A control system as recited in claim 1, further comprising a hardware 
latch having reset logic associated therewith. 

7. A control system as recited in claim 1, further comprising software test 
interfaces for testing the performance of the control system. 

8. A control system as recited in claim 1, wherein the means for providing 
a desired minimum fuel flow to the engine when an overspeed condition is detected 
includes a first solenoid valve and the means for shutting off fuel flow to the engine 
when an overspeed condition is detected includes a second solenoid valve. 

9. A control system as recited in claim 1, wherein an overspeed condition 
is detected based on at least one of a power turbine speed signal, a gas generator speed 
signal and main rotor speed signal. 

10. A control system as recited in claim 1, wherein the system is a dual 
channel system having an interchannel communication means for ensuring that a fault 
in one channel of the system will not shut down the control system. 

11. A control system as recited in claim 1, wherein an overspeed condition 
is detected based on at least one of a power turbine speed signal, a gas generator speed 
signal and main rotor speed signal. 
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12. A control system for a turboshaft engine comprising means for shutting 
off fuel flow to the engine when an overspeed condition is detected, wherein the 
overspeed condition is detected by first and second control logic paths, the first path 
including a derivative path and a non-derivative path and the second path including a 
non-derivative path. 

13. A control system as recited in claim 1, further comprising means for 
disabling the means for shutting off fuel flow to the engine when an overspeed 
condition when the engine is operating below an altitude of 10,000. 

14. A control system for a turboshaft engine comprising: 

a) means for proving a minimum fuel flow to the engine when an 
overspeed condition is detected in a first operating range; and 

b) means for shutting off fuel flow to the engine when an overspeed 
condition is detected in a second operating range, provided that the overspeed condition 
is detected along two different engine speed signal paths, including a derivative path 
and a non-derivative path. 

15. A control system as recited in claim 14, wherein in the first operating 
range the engine is operating at a relatively low altitude and in the second operating 
range the engine is operating at a relatively high altitude. 
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16. A control system as recited in claim 15, wherein the relatively low 
altitude includes 0 to 10,000 feet above sea level and the relatively high altitude 
exceeds 10,000 feet above sea level. 

17. A control system as recited in claim 14, wherein the derivative path 
include derivative and proportional control logic and the non-derivative path includes 
proportional logic. 

18. A control system as recited in claim 14, further comprising a hardware 
latch having reset logic associated therewith. 

19. A control system as recited in claim 14, further comprising software test 
interfaces for testing the performance of the control system. 

20. A control system as recited in claim 14, wherein the means for providing 
a desired minimum fuel flow to the engine when an overspeed condition is detected 
includes a first solenoid valve and the means for shutting off fuel flow to the engine 
when an overspeed condition is detected includes a second solenoid valve. 

21. A control system as recited in claim 14, wherein an overspeed condition 
is detected based on at least one of a power turbine speed signal, a gas generator speed 
signal and main rotor speed signal. 
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22. A control system as recited in claim 14, wherein the system is a dual 
channel system having an interchannel communication means for ensuring that a fault 
in one channel of the system will not shut down the control system. 



23. A method for limiting turboshaft engine overspeed comprising the steps 

of: 

a) measuring at least one engine speed parameter; 

b) sensing the altitude at which the engine is operating; 

c) determining whether an overspeed condition exists based on the 
measured speed parameter using a control system which includes a first logic path 
having derivative and non-derivative control logic and a second logic path having non- 
derivative logic; 

d) providing a desired minimum fuel flow to the engine when an overspeed 
condition is detected^by the engine control system when the engine is operating in a 
first altitude range; and 

e) shutting off fuel flow to the engine when an overspeed condition is 
detected by the engine control system and the engine is operating in a second operating 
range. 
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